packages/libxml2
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
77 Commits 1 Branch 0 Tags
Go to file
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
willwolf 44a51b57b0 fix CVE-2023-45322 
Signed-off-by: willwolf <hehuazhen@huawei.com>
(cherry picked from commit f182b37f3087868dd30322b5ccc3a82e2f00e78a)
2023-10-30 10:18:50 +08:00
Add-regexp-regression-tests.patch
Fix integer overflow in xmlFAParseQuantExact
2020-08-12 16:20:36 +08:00
backport-Add-test-case-for-recursive-external-parsed-entities.patch
fix problems detected by oss-fuzz test
2021-03-02 19:48:37 +08:00
backport-Always-initialize-SAX1-element-handlers.patch
parser: Fix old SAX1 parser with custom callbacks
2023-09-26 14:17:53 +08:00
backport-Avoid-call-stack-overflow-with-XML-reader-and-recurs.patch
fix problems detected by oss-fuzz test
2021-03-02 19:48:37 +08:00
backport-CVE-2016-3709.patch
Fix CVE-2016-3709
2022-08-08 11:14:03 +08:00
backport-CVE-2021-3537.patch
fix CVE-2021-3537
2021-05-27 16:40:43 +08:00
backport-CVE-2022-23308-Use-after-free-of-ID-and-IDREF-attrib.patch
fix CVE-2022-23308
2022-03-09 11:54:11 +08:00
backport-CVE-2022-29824-Fix-integer-overflows-in-xmlBuf-and-xmlBuffer.patch
fix CVE-2022-29824
2022-05-09 09:51:59 +08:00
backport-CVE-2022-40303-Fix-integer-overflows-with-XML_PARSE_.patch
fix CVE-2022-40303 CVE-2022-40304
2022-11-08 17:14:14 +08:00
backport-CVE-2022-40304-Fix-dict-corruption-caused-by-entity-.patch
fix CVE-2022-40303 CVE-2022-40304
2022-11-08 17:14:14 +08:00
backport-CVE-2023-28484-Fix-null-deref-in-xmlSchemaFixupCompl.patch
fix CVE-2023-28484 CVE-2023-29469
2023-04-23 11:51:06 +08:00
backport-CVE-2023-29469-Hashing-of-empty-dict-strings-isn-t-d.patch
fix CVE-2023-28484 CVE-2023-29469
2023-04-23 11:51:06 +08:00
backport-CVE-2023-45322.patch
fix CVE-2023-45322
2023-10-30 10:18:50 +08:00
backport-Fix-HTML-push-parser-lookahead.patch
fix problems detected by oss-fuzz test
2021-03-02 19:48:37 +08:00
backport-Fix-infinite-loop-in-HTML-parser-introduced-with-rec.patch
fix problems detected by oss-fuzz test
2021-03-02 19:48:37 +08:00
backport-fix-infinite-loop-in-xmlStringLenDecodeEntities.patch
Sync some patches from community
2020-03-17 21:03:10 +08:00
backport-Fix-integer-overflow-in-xmlSchemaGetParticleTotalRan.patch
fix problems detected by oss-fuzz test
2021-03-02 19:48:37 +08:00
backport-Fix-memory-leak-in-xmlSchemaValidateStream.patch
upgrade software to v2.9.10
2020-05-11 15:09:02 +08:00
backport-Fix-old-SAX1-parser-with-custom-callbacks.patch
parser: Fix old SAX1 parser with custom callbacks
2023-09-26 14:17:53 +08:00
backport-Fix-quadratic-runtime-in-HTML-parser.patch
fix problems detected by oss-fuzz test
2021-03-02 19:48:37 +08:00
backport-Fix-quadratic-runtime-in-HTML-push-parser-with-null-.patch
fix problems detected by oss-fuzz test
2021-03-02 19:48:37 +08:00
backport-Fix-quadratic-runtime-when-push-parsing-HTML-entity-.patch
fix problems detected by oss-fuzz test
2021-03-02 19:48:37 +08:00
backport-Fix-regression-introduced-with-477c7f6a.patch
fix problems detected by oss-fuzz test
2021-03-02 19:48:37 +08:00
backport-Fix-timeout-when-handling-recursive-entities.patch
fix problems detected by oss-fuzz test
2021-03-02 19:48:37 +08:00
backport-malloc-fail-Fix-memory-leak-in-xmlStaticCopyNodeList.patch
fix CVE-2023-45322
2023-10-30 10:18:50 +08:00
backport-parser-Fix-potential-memory-leak-in-xmlParseAttValue.patch
backport upstream patches
2022-11-21 10:42:39 +08:00
backport-pre-CVE-2022-40303-Remove-useless-comparisons.patch
fix CVE-2022-40303 CVE-2022-40304
2022-11-08 17:14:14 +08:00
backport-Reset-HTML-parser-input-before-reporting-encoding-er.patch
fix problems detected by oss-fuzz test
2021-03-02 19:48:37 +08:00
backport-Revert-Fix-memory-leak-in-xmlParseBalancedChunkMemor.patch
fix valgrind errors in xmlParseBalancedChunkMemoryRecover
2022-02-26 16:51:43 +08:00
backport-schemas-Fix-null-pointer-deref-in-xmlSchemaCheckCOSS.patch
backport upstream patches
2022-11-21 10:42:39 +08:00
backport-Updated-python-tests-tstLastError.py.patch
upgrade software to v2.9.10
2020-05-11 15:09:02 +08:00
backport-xmlParseBalancedChunkMemory-must-not-be-called-with-.patch
fix valgrind errors in xmlParseBalancedChunkMemoryRecover
2022-02-26 16:51:43 +08:00
Check-for-overflow-when-allocating-two-dimensional-a.patch
Sync some patches from community
2020-06-24 11:26:04 +08:00
Copy-some-XMLReader-option-flags-to-parser-context.patch
Sync some patches from community
2020-06-24 11:26:04 +08:00
CVE-2021-3517.patch
fix CVE-2021-3517 and CVE-2021-3518
2021-05-28 11:40:32 +08:00
CVE-2021-3518.patch
fix CVE-2021-3517 and CVE-2021-3518
2021-05-28 11:40:32 +08:00
CVE-2021-3541.patch
fix CVE-2021-3541
2021-06-02 11:06:48 +08:00
Don-t-add-formatting-newlines-to-XInclude-nodes.patch
backport upstream patches
2021-12-02 14:41:13 +08:00
Don-t-load-external-entity-from-xmlSAX2GetEntity.patch
Sync some patches from community
2020-06-24 11:26:04 +08:00
Don-t-process-siblings-of-root-in-xmlXIncludeProcess.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
Don-t-recurse-into-xi-include-children-in-xmlXInclud.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
encoding-fix-memleak-in-xmlRegisterCharEncodingHandl.patch
fix issues about SEGV, memleak, overflow, etc.
2021-11-11 20:19:02 +08:00
Fix-another-memory-leak-in-xmlSchemaValAtomicType.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
Fix-cleanup-of-attributes-in-XML-reader.patch
fix problems detected by oss-fuzz test
2020-11-12 19:04:00 +08:00
Fix-copying-of-entities-in-xmlParseReference.patch
Sync some patches from community
2020-06-24 11:26:04 +08:00
Fix-corner-case-with-empty-xi-fallback.patch
backport upstream patches
2021-12-02 14:41:13 +08:00
Fix-dangling-pointer-with-xmllint-dropdtd.patch
add patches from upstream
2021-05-29 17:41:53 +08:00
Fix-double-free-in-XML-reader-with-XIncludes.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
Fix-duplicate-xmlStrEqual-calls-in-htmlParseEndTag.patch
add patches from upstream
2021-05-29 17:41:53 +08:00
Fix-error-reporting-with-xi-fallback.patch
backport upstream patches
2021-12-02 14:41:13 +08:00
Fix-exponential-behavior-with-recursive-entities.patch
add patches from upstream
2021-05-29 17:41:53 +08:00
Fix-exponential-runtime-and-memory-in-xi-fallback-pr.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
Fix-exponential-runtime-in-xmlFARecurseDeterminism.patch
Limit regexp nesting depth and Fix exponential runtime in xmlFARecurseDeterminism
2020-08-12 19:30:00 +08:00
Fix-freeing-of-nested-documents.patch
Sync some patches from community
2020-06-24 11:26:04 +08:00
Fix-handling-of-unexpected-EOF-in-xmlParseContent.patch
add patches from upstream
2021-05-29 17:41:53 +08:00
Fix-integer-overflow-in-_xmlSchemaParseGYear.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
Fix-integer-overflow-in-htmlParseCharRef.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
Fix-integer-overflow-in-xmlBufferResize.patch
Sync some patches from community
2020-06-24 11:26:04 +08:00
Fix-integer-overflow-in-xmlFAParseQuantExact.patch
Fix integer overflow in xmlFAParseQuantExact
2020-08-12 16:20:36 +08:00
Fix-integer-overflow-when-comparing-schema-dates.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
Fix-integer-overflow-when-parsing-min-max-Occurs.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
Fix-line-numbers-in-error-messages-for-mismatched-ta.patch
add patches from upstream
2021-05-29 17:41:53 +08:00
Fix-memleaks-in-xmlXIncludeProcessFlags.patch
fix memleaks in xmlXIncludeProcessFlags
2021-11-09 16:59:12 +08:00
Fix-memory-leak-in-error-path-of-XPath-expr-parser.patch
Sync some patches from community
2020-06-24 11:26:04 +08:00
Fix-memory-leak-in-runtest.c.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
Fix-memory-leak-in-xmlParseElementMixedContentDecl.patch
fix issues about SEGV, memleak, overflow, etc.
2021-11-11 20:19:02 +08:00
Fix-memory-leak-in-xmlXIncludeAddNode-error-paths.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
Fix-memory-leak-in-xmlXIncludeIncludeNode-error-path.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
Fix-memory-leak-in-xmlXIncludeLoadDoc-error-path.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
Fix-memory-leak-when-shared-libxml-dll-is-unloaded.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
Fix-memory-leaks-for-xmlACatalogAdd.patch
Fix memory leaks for xmlACatalogAdd
2022-06-16 20:06:35 +08:00
Fix-memory-leaks-in-xmlACatalogAdd-when-xmlHashAddEntry-failed.patch
Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed
2022-06-24 10:07:40 +08:00
Fix-memory-leaks-in-XPointer-string-range-function.patch
fix fuzz issues
2021-10-23 17:13:09 +08:00
Fix-memory-leaks-of-encoding-handlers-in-xmlsave-c.patch
Sync some patches from community
2020-06-24 11:26:04 +08:00
Fix-more-memory-leaks-in-error-paths-of-XPath-parser.patch
Sync some patches from community
2020-06-24 11:26:04 +08:00
Fix-more-quadratic-runtime-issues-in-HTML-push-parse.patch
Fix more quadratic runtime issues in HTML push parse
2020-08-28 19:55:54 +08:00
Fix-NodeDumpOutput-functions.patch
backport upstream patches
2021-12-02 14:41:13 +08:00
Fix-null-deref-in-legacy-SAX1-parser.patch
add patches from upstream
2021-05-29 17:41:53 +08:00
Fix-Null-deref-in-xmlSchemaGetComponentTargetNs.patch
fix null deref in xmlSchemaGetComponentTargetNs
2021-10-30 16:06:41 +08:00
Fix-null-deref-in-xmlStringGetNodeList.patch
fix issues about SEGV, memleak, overflow, etc.
2021-11-11 20:19:02 +08:00
Fix-null-deref-in-XPointer-expression-error-path.patch
fix problems detected by oss-fuzz test
2020-11-12 19:04:00 +08:00
Fix-null-pointer-deref-in-xmlXPtrRangeInsideFunction.patch
fix fuzz issues
2021-10-23 17:13:09 +08:00
Fix-overflow-check-in-xmlNodeDump.patch
Sync some patches from community
2020-06-24 11:26:04 +08:00
Fix-overflow-handling-in-xmlBufBackToBuffer.patch
Sync some patches from community
2020-06-24 11:26:04 +08:00
Fix-quadratic-behavior-when-looking-up-xml-attribute.patch
add patches from upstream
2021-05-29 17:41:53 +08:00
Fix-quadratic-runtime-in-xi-fallback-processing.patch
backport upstream patches
2021-12-02 14:41:13 +08:00
Fix-quadratic-runtime-when-parsing-HTML-script-conte.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
Fix-regression-in-xmlNodeDumpOutputInternal.patch
backport upstream patches
2021-12-02 14:41:13 +08:00
Fix-regression-introduced-with-commit-74dcc10b.patch
backport upstream patches
2021-12-02 14:41:13 +08:00
Fix-regression-introduced-with-commit-d88df4b.patch
backport upstream patches
2021-12-02 14:41:13 +08:00
Fix-SEGV-in-xmlSAXParseFileWithData.patch
fix issues about SEGV, memleak, overflow, etc.
2021-11-11 20:19:02 +08:00
Fix-slow-parsing-of-HTML-with-encoding-errors.patch
fix issues about SEGV, memleak, overflow, etc.
2021-11-11 20:19:02 +08:00
Fix-undefined-behavior-in-UTF16LEToUTF8.patch
fix issues about SEGV, memleak, overflow, etc.
2021-11-11 20:19:02 +08:00
Fix-undefined-behavior-in-xmlXPathTryStreamCompile.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
Fix-unsigned-integer-overflow-in-htmlParseTryOrFinis.patch
fix issues about SEGV, memleak, overflow, etc.
2021-11-11 20:19:02 +08:00
Fix-use-after-free-when-XIncluding-text-from-Reader.patch
fix problems detected by oss-fuzz test
2020-11-12 19:04:00 +08:00
Fix-use-after-free-with-validating-reader.patch
Fix use after free with validating reader
2020-07-30 17:32:07 +08:00
Fix-use-after-free-with-xmllint-html-push.patch
add patches from upstream
2021-05-29 17:41:53 +08:00
Fix-UTF-8-decoder-in-HTML-parser.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
Fix-XInclude-regression-introduced-with-recent-commi.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
Fix-xmlGetNodePath-with-invalid-node-types.patch
add patches from upstream
2021-05-29 17:41:53 +08:00
Fix-XPath-recursion-limit.patch
fix fuzz issues
2021-10-23 17:13:09 +08:00
Fuzz-XInclude-engine.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
Handle-dumps-of-corrupted-documents-more-gracefully.patch
backport upstream patches
2021-12-02 14:41:13 +08:00
Hardcode-maximum-XPath-recursion-depth.patch
fix fuzz issues
2021-10-23 17:13:09 +08:00
libxml2-2.9.10.tar.gz
upgrade software to v2.9.10
2020-05-11 15:09:02 +08:00
libxml2-multilib.patch
Package init
2019-12-25 17:13:34 +08:00
libxml2.spec
fix CVE-2023-45322
2023-10-30 10:18:50 +08:00
Limit-regexp-nesting-depth.patch
Limit regexp nesting depth and Fix exponential runtime in xmlFARecurseDeterminism
2020-08-12 19:30:00 +08:00
Limit-size-of-free-lists-in-XML-reader-when-fuzzing.patch
Fixed some issues found in fuzzing testcases
2020-11-12 11:52:00 +08:00
Make-htmlNodeDumpFormatOutput-non-recursive.patch
backport upstream patches
2021-12-02 14:41:13 +08:00
Make-xmlNodeDumpOutputInternal-non-recursive.patch
backport upstream patches
2021-12-02 14:41:13 +08:00
Merge-code-paths-loading-external-entities.patch
Sync some patches from community
2020-06-24 11:26:04 +08:00
More-NodeDumpOutput-fixes.patch
backport upstream patches
2021-12-02 14:41:13 +08:00
Never-expand-parameter-entities-in-text-declaration.patch
Fix use after free with validating reader
2020-07-30 17:32:07 +08:00
Null-pointer-handling-in-catalog-c.patch
Sync some patches from community
2020-06-24 11:26:04 +08:00
Remove-dead-code-in-xinclude.c.patch
backport upstream patches
2021-12-02 14:41:13 +08:00
Remove-unused-encoding-parameter-of-HTML-output-func.patch
backport upstream patches
2021-12-02 14:41:13 +08:00
Report-error-for-invalid-regexp-quantifiers.patch
Fix integer overflow in xmlFAParseQuantExact
2020-08-12 16:20:36 +08:00
Reset-HTML-parser-input-before-reporting-error.patch
Fix more quadratic runtime issues in HTML push parse
2020-08-28 19:55:54 +08:00
Revert-Fix-quadratic-runtime-in-xi-fallback-processi.patch
backport upstream patches
2021-12-02 14:41:13 +08:00
Stop-checking-attributes-for-UTF-8-validity.patch
add patches from upstream
2021-05-29 17:41:53 +08:00
Stop-using-maxParserDepth-in-xpath.c.patch
fix fuzz issues
2021-10-23 17:13:09 +08:00
update-for-xsd-language-type-check.patch
add patches from upstream
2021-05-29 17:41:53 +08:00
Use-random-seed-in-xmlDictComputeFastKey.patch
Sync some patches from community
2020-06-24 11:26:04 +08:00
Work-around-lxml-API-abuse.patch
backport upstream patches
2021-12-02 14:41:13 +08:00
xmlAddChild-and-xmlAddNextSibling-may-not-attach-the.patch
use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild
2022-02-12 11:16:28 +08:00
Description
No description provided
10 MiB
Languages
Diff 100%